rack_web_console 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: dcd27bbf7602dceca8c4f8a932e4357b6fa71a86
-  data.tar.gz: 41d49308a3c17ebca10343b53151f4b89954edd2
+  metadata.gz: 1dfaeac9ee45c324241bea12915d58f6bbd5be2e
+  data.tar.gz: 2bd64bc6b3e89fc89610a7c570136237b300888b
 SHA512:
-  metadata.gz: abd3d2c15e9dead6eb862166110c2d3345c6a316bdd61d6c2df9228e93877ed569cae64281169cd940a688b41b4afb94661122fa2aa1db9c03dca483594e6095
-  data.tar.gz: bff88e035f39d359e6c064ae16ce55f178c83f8f824a80ed34efb0118e4fc803636404da801f489b9e7add0c4a5fee9a57ad0ade3bb7af3d63b31dd54d54481d
+  metadata.gz: 85a986e233d90c6723b59b35a8d5fa310ec6db0820b25b61c8b1dd4a85e069e53a3074817fa517fe27fd800ab08439228213a2fa301dc9d9acf02d60b0fd9269
+  data.tar.gz: 422c7aa741fbae714a64ba95ca3530f86d98ec4a321519241897269a1155f2b315fb243140bbc3b8fc422babd27f51e71c7901df360aa3afd90566101316d7f0

data/.travis.yml

@@ -2,4 +2,7 @@ sudo: false
 language: ruby
 rvm:
   - 2.3.1
+  - jruby-9.1.2.0
 before_install: gem install bundler -v 1.12.5
+env:
+  - WAIT_FOR_BOOT_TIME=1

data/README.md

@@ -1,4 +1,4 @@
-# Rack Web Console
+# Rack Web Console [![Build Status](https://travis-ci.org/rosenfeld/rack_web_console.svg?branch=master)](https://travis-ci.org/rosenfeld/rack_web_console)
 
 Rack Web Console is a simple Rack app class that allows one to run arbitrary Ruby code on a given
 binding, which may be useful in development mode to test some code in a given context. This is
@@ -96,6 +96,11 @@ Thread.current[:rack_console_capture_all] = true
 Thread.start{ puts 'now it should be displayed in the browser' }.join
 ```
 
+### Shortcuts from inside the textarea
+
+- Ctrl+Enter: Run code
+- Esc, Esc: Clear output
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec`

data/lib/rack-console-view.erb

@@ -21,6 +21,7 @@
   <div id="results"></div>
 
   <script>
+  ;(function(){
   var run_path = '', lastEscTime = 0,
       results = $el('results'), runScriptButton = $el('run-script'),
       clearResultsButton = $el('clear-results'), script = $el('script'), request
@@ -46,7 +47,8 @@
         div.innerHTML = this.responseText
         results.appendChild(div)
       }
-      request.send('script=' + encodeURIComponent(script.value))
+      request.send('script=' + encodeURIComponent(script.value) + '&token=' +
+          encodeURIComponent('<%= token %>'))
     }
     function onKeyDown(ev) {
       if (ev.ctrlKey && ev.keyCode == 13) runScript() // Ctrl + Enter
@@ -55,6 +57,7 @@
         lastEscTime = new Date().getTime()
       }
     }
+  })();
   </script>
 </body>
 </html>

data/lib/rack_console/version.rb

@@ -1,3 +1,3 @@
 class RackConsole
-  VERSION = '0.1.1'
+  VERSION = '0.1.2'
 end

data/lib/rack_web_console.rb

@@ -1,5 +1,6 @@
 require 'erb'
 require 'cgi'
+require 'securerandom'
 require_relative 'rack_console/version'
 require_relative 'rack_console/cookie_script_storage'
 require_relative 'rack_console/output_capture'
@@ -7,8 +8,9 @@ require_relative 'rack_console/output_capture'
 class RackConsole
   VIEW_TEMPLATE = ::File.join __dir__, 'rack-console-view.erb'
 
-  def initialize(_binding = binding, storage: ->(env){ CookieScriptStorage.new env })
+  def initialize(_binding = binding, storage: ->(env){ CookieScriptStorage.new env }, token: nil)
     @storage, @binding = storage, _binding
+    @@token ||= token || SecureRandom.base64(32)
   end
 
   def call(env)
@@ -20,8 +22,10 @@ class RackConsole
 
 
   def process_script(env)
-    return [403, {}, []] unless same_origin?(env)
-    script = CGI.unescape env['rack.input'].read.sub(/\Ascript=/, '')
+    params = CGI.parse env['rack.input'].read
+    token = params['token']&.first.to_s
+    return [403, {}, []] unless same_origin?(env) && token == @@token
+    script = params['script'].first
     @_storage&.script=(script)
     result = []
     (oc = OutputCapture.new).capture do
@@ -52,6 +56,7 @@ class RackConsole
 
   def view_response(env)
     script = (s = @_storage&.script) ? ::ERB::Util.h(s) : ''
+    token = @@token
     ::ERB.new(::File.read view_template).result binding
   end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack_web_console
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Rodrigo Rosenfeld Rosas
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-07-22 00:00:00.000000000 Z
+date: 2016-07-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler